🚀 go-pugleaf

Daryl Lim wrote:

> Hi,
>
> Could someone tell me or point me to some place where it documents how
> to secure a FTP Server.
>
> I'm running RedHat 4.1 with 2.0.29 Kernel ..
>
> What I would like to know is how can I stop webpage owners from
> browsing outside there home directory eg. /web/html/~page/ . Currently
> if they were to FTP in they could browse outside there home directory
> to other directories eg. /usr/??? . This may seem very paranoid but I
> just want them to be able to FTP to their home directory to change
> their pages *only* . And not really snoop around
>
> I have found a site ages ago . That if I remembered correctly didn't
> allow them to browse outside the base directory eg. /web .. They
> couldn't go below that eg / . But now I can not remember where it was
>
> Any help would be extremely grateful
>
> Daryl,

  Normally as in the "anonymous" type FTP, the user gets a line in
/etc/passwd as :
babe:ecrypted_passwd:uid:gid:comment:/web/html/./user:/bin/false

^^^
the dot means a chroot()ed path so /web/html becomes "/", this is the
theory,
you can achieve this with Wu-ftpd or  proftpd.
Hope this helps a little
Daniel